Privacy Policy

1. Who is responsible for your data

Trump Law Group ("we", "us", "the practice") is the data controller for personal data processed through this website and the case intake process. Contact details for data protection enquiries, including requests to exercise your rights, are set out in the final section of this policy.

2. What data we collect

We collect the following categories of personal data.

• Data you submit through the case review form: full name, email address, telephone number, country of residence, the approximate amount lost and its currency, when the loss occurred, the platform, website or name involved, and any further details you choose to provide.
• Data you send us afterwards: documents, statements, correspondence, screenshots, transaction records and any other material provided in support of a matter.
• Technical data collected automatically: IP-derived country, browser type and version, device type, referring page, the pages visited on this site, and campaign parameters where you arrived from an advertisement.
• Cookie and consent data: your language selection and your cookie preferences, together with the date they were given.
• Communications data: the content and metadata of emails, calls and messages exchanged with the practice.

Case material frequently contains special category data or data relating to criminal offences — for example where a matter involves health, relationships or allegations of criminal conduct. Such data is processed only where necessary for the establishment, exercise or defence of legal claims, and is subject to additional safeguards.

We do not ask for, and you should never provide, banking passwords, one-time passcodes, card PINs, full payment card numbers, cryptocurrency private keys or seed phrases. If any such information reaches us it is deleted.

3. Why we process it, and on what legal basis

• To assess a case review request and reply to it — on the basis of steps taken at your request prior to entering a contract, and your consent given when submitting the form.
• To provide legal and investigative services where a matter is taken on — on the basis of performance of a contract.
• To establish, exercise or defend legal claims, including preparing filings to institutions and authorities — on the basis of our legitimate interests and, for special category data, the legal claims exception.
• To comply with legal, regulatory and professional obligations, including anti-money-laundering and record-keeping requirements — on the basis of legal obligation.
• To operate, secure and improve this website, and to detect and prevent abuse of the intake form — on the basis of our legitimate interests.
• To measure the performance of our advertising and to send occasional fraud-prevention updates where you have opted in — on the basis of your consent, which may be withdrawn at any time.

4. Who your data may be shared with

Personal data is never sold and is never shared for the marketing purposes of third parties. It may be disclosed to the following recipients where a matter requires it.

• Banks, payment institutions, e-money firms, card schemes and virtual-asset service providers, where a recall, notice, freeze request or dispute is made on your behalf.
• National cybercrime and economic-crime units, financial regulators, Financial Intelligence Units, ombudsman schemes and courts, where a complaint or filing is made on your behalf.
• Local counsel and correspondent lawyers instructed in the relevant jurisdiction for your matter.
• Forensic tracing, translation, secure hosting and IT service providers acting as processors under written contract and on our instructions only.
• Insurers, auditors and professional advisers where necessary and subject to confidentiality.
• Any recipient where disclosure is required by law, regulation, court order or professional obligation.

Filings made on your behalf necessarily disclose the case facts and supporting documents to the receiving institution or authority. Where a matter is grouped with others involving the same operator, your identifying details are not disclosed to other clients.

5. International transfers

Data is processed primarily within the European Economic Area and the United Kingdom. Where a matter requires disclosure to an institution, authority, exchange or lawyer outside that area — which is common in cross-border fraud — the transfer is made on the basis of an adequacy decision where one applies, on the basis of Standard Contractual Clauses with appropriate supplementary measures, or because the transfer is necessary for the establishment, exercise or defence of legal claims.

6. How long data is kept

• Case review submissions that do not proceed to an engagement: retained for up to 24 months, so that later related matters and repeat operators can be identified, then deleted or anonymised.
• Engaged matters: retained for the period required by applicable professional, regulatory and limitation rules, generally not less than seven years from closure.
• Anti-money-laundering identification records: retained for the statutory period applicable in the relevant jurisdiction.
• Website technical logs: retained for up to 12 months.
• Consent records: retained for as long as needed to demonstrate compliance.

7. Your rights

Subject to the conditions and exemptions in applicable data protection law, you have the following rights.

• Access — to obtain confirmation of whether we process your data and a copy of it.
• Rectification — to have inaccurate or incomplete data corrected.
• Erasure — to have data deleted where there is no overriding legal ground to retain it. Professional retention obligations and the needs of live legal claims frequently constitute such a ground.
• Restriction — to limit how data is used in defined circumstances.
• Objection — to object to processing carried out on the basis of legitimate interests, and at any time to direct marketing.
• Portability — to receive data you provided in a structured, machine-readable format, where processing is based on consent or contract and carried out by automated means.
• Withdrawal of consent — at any time, without affecting the lawfulness of processing before withdrawal.
• Complaint — to lodge a complaint with the supervisory authority in your country of residence, place of work or the place of the alleged infringement.

Requests are answered within one month, extendable by two further months for complex requests. There is no charge unless a request is manifestly unfounded or excessive.

8. Automated processing

Submissions are automatically matched against our case history to identify shared wallets, entities, domains and infrastructure, and are automatically screened for spam and abuse. These processes support human assessment and prioritisation; they do not decide the outcome of a case. Every submission is read by a case officer, and no decision producing legal effects is taken by automated means alone.

9. Security

Data is transmitted over encrypted connections and stored in access-controlled systems hosted within the European Economic Area or under equivalent safeguards. Access is restricted to personnel who require it for a matter, and case material is held under professional confidentiality. No system can be guaranteed absolutely secure; where a breach occurs that is likely to result in a risk to your rights, you and the competent supervisory authority will be notified as required by law.

10. Cookies

This site uses strictly necessary cookies to function, and — only with your consent — analytics and advertising cookies to measure campaign performance. Consent can be given, refused and changed at any time through the cookie banner. Full details are in the Cookie Policy.

11. Children

This website and the intake process are directed at adults. We do not knowingly collect data from persons under 18. Where a matter concerns a person under 18, it should be submitted by a parent or legal guardian.

12. Changes to this policy

This policy may be updated to reflect changes in our processing or in the law. The date at the top records the current version. Material changes affecting existing clients are notified directly.

13. Contact

Data protection enquiries and requests to exercise your rights should be sent to the privacy contact address shown in the footer of this website, marked "Data protection request". Please describe the request and provide enough information to identify your records.